CVE-2026-39920
|
| |
|
|
Software afectado |
APACHE |
|
|
|
BridgeHead FileStore versions prior to 24A (released in early 2024) expose the Apache Axis2 administration module on network-accessible endpoints with default credentials that allows unauthenticated remote attackers to execute arbitrary OS commands. Attackers can authenticate to the admin console using default credentials, upload a malicious Java archive as a web service, and execute arbitrary commands on the host via SOAP requests to the deployed service. |
Link: |
| https://nvd.nist.gov/vuln/detail/CVE-2026-39920 |
